9bd97319a9eabae9d6fdc1a42fbd23e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bd97319a9eabae9d6fdc1a42fbd23e1
Size

69KB
MD5

9bd97319a9eabae9d6fdc1a42fbd23e1
SHA1

d44e47856005ab0e5f86add27d82ab42dd560383
SHA256

d4804d424161118b1f6d4d1106b6ed8881be23d8078e2d6f9da84dfdc1c34d92
SHA512

c88131c0980a54f9255713be835b54de3c79ccf2ad7cd6c209cc93f7c214002caac4467ea9d8f3875f7d2098751437e52bd249e3e67367d35c236a438104976f
SSDEEP

768:JM6dFpLKbq8RBzt0x7JtbSB3mtteF+7//T8RR+tP4e7qdJvXtDrqZfeY7TE1q:JlFcJcx7LUmtL7//4OKFGsYn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bd97319a9eabae9d6fdc1a42fbd23e1

Files

9bd97319a9eabae9d6fdc1a42fbd23e1
.dll regsvr32 windows:6 windows x64 arch:x64

dd2462e9fd4e377146b7a9f0263a0b8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
VirtualAlloc
VirtualFree
GetSystemTime
LoadLibraryA

Exports

Exports

AhwexizsljIxxxjcpuAqjuwae
DllRegisterServer
OgtnoykxjkbWjnqtyodvvrcor
update

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ